Skip to content

feat: add hidden --connect-tunnel flag for Connect Tunnel - #2721

Merged
panavenue merged 1 commit into
GoogleCloudPlatform:mainfrom
robin-yiranf:connect-tunnel
Nov 11, 2026
Merged

panavenue merged 1 commit into
GoogleCloudPlatform:mainfrom
robin-yiranf:connect-tunnel

Conversation

@robin-yiranf

Copy link
Copy Markdown
Contributor

Summary

Add support for Connect Tunnel connections via SqlDataService without falling back to direct IP connections (GoogleCloudPlatform/cloud-sql-go-connector#1208):

  • Add hidden --connect-tunnel flag (CSQL_PROXY_CONNECT_TUNNEL) and ?connect-tunnel=true instance query parameter.
  • Enforce mutual exclusivity between connect-tunnel and --private-ip, --psc, --sql-data, and --auto-ip (both globally and per-instance).
  • Skip startup connection info cache warmup when ConnectTunnel is enabled globally or per-instance, matching SQLDataEnabled.
  • Upgrade cloud.google.com/go/cloudsqlconn to v1.26.1-0.20261111183309-d7d5ff5c4533 (WithConnectTunnel() + Auto IAM authentication support in StartSession).

Testing

  • go test ./cmd/... ./internal/proxy/...

@robin-yiranf
robin-yiranf requested a review from a team as a code owner November 11, 2026 18:58

@hessjcg hessjcg left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@panavenue
panavenue merged commit 458deeb into GoogleCloudPlatform:main Nov 11, 2026
18 of 21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants